Dahua DHI-VTO3211D-P4-S1 User manual

Villa VTO
User’s Manual
V1.0.0

Cybersecurity Recommendations I
Cybersecurity Recommendations
Mandatory actions to be taken towards cybersecurity
1. Change Passwords and Use Strong Passwords:
The number one reason systems get “hacked” is due to having weak or default passwords. It is
recommended to change default passwords immediately and choose a strong password
whenever possible. A strong password should be made up of at least 8 characters and a
combination of special characters, numbers, and upper and lower case letters.
2. Update Firmware
As is standard procedure in the tech-industry, we recommend keeping NVR, DVR, and IP
camera firmware up-to-date to ensure the system is current with the latest security patches and
fixes.
“Nice to have” recommendations to improve your network security
1. Change Passwords Regularly
Regularly change the credentials to your devices to help ensure that only authorized users are
able to access the system.
2. Change Default HTTP and TCP Ports:
● Change default HTTP and TCP ports for systems. These are the two ports used to
communicate and to view video feeds remotely.
● These ports can be changed to any set of numbers between 1025-65535. Avoiding the
default ports reduces the risk of outsiders being able to guess which ports you are using.
3. Enable HTTPS/SSL:
Set up an SSL Certificate to enable HTTPS. This will encrypt all communication between your
devices and recorder.
4. Enable IP Filter:
Enabling your IP filter will prevent everyone, except those with specified IP addresses, from
accessing the system.
5. Change ONVIF Password:
On older IP Camera firmware, the ONVIF password does not change when you change the
system’s credentials. You will need to either update the camera’s firmware to the latest revision
or manually change the ONVIF password.
6. Forward Only Ports You Need:

Cybersecurity Recommendations II
● Only forward the HTTP and TCP ports that you need to use. Do not forward a huge range of
numbers to the device. Do not DMZ the device's IP address.
● You do not need to forward any ports for individual cameras if they are all connected to a
recorder on site; just the NVR is needed.
7. Disable Auto-Login on SmartPSS:
Those using SmartPSS to view their system and on a computer that is used by multiple people
should disable auto-login. This adds a layer of security to prevent users without the appropriate
credentials from accessing the system.
8. Use a Different Username and Password for SmartPSS:
In the event that your social media, bank, email, etc. account is compromised, you would not
want someone collecting those passwords and trying them out on your video surveillance
system. Using a different username and password for your security system will make it more
difficult for someone to guess their way into your system.
9. Limit Features of Guest Accounts:
If your system is set up for multiple users, ensure that each user only has rights to features and
functions they need to use to perform their job.
10. UPnP:
● UPnP will automatically try to forward ports in your router or modem. Normally this would be a
good thing. However, if your system automatically forwards the ports and you leave the
credentials defaulted, you may end up with unwanted visitors.
● If you manually forwarded the HTTP and TCP ports in your router/modem, this feature should
be turned off regardless. Disabling UPnP is recommended when the function is not used in real
applications.
11. SNMP:
Disable SNMP if you are not using it. If you are using SNMP, you should do so only temporarily,
for tracing and testing purposes only.
12. Multicast:
Multicast is used to share video streams between two recorders. Currently there are no known
issues involving Multicast, but if you are not using this feature, deactivation can enhance your
network security.
13. Check the Log:
If you suspect that someone has gained unauthorized access to your system, you can check
the system log. The system log will show you which IP addresses were used to login to your
system and what was accessed.
14. Physically Lock Down the Device:

Cybersecurity Recommendations III
Ideally, you want to prevent any unauthorized physical access to your system. The best way to
achieve this is to install the recorder in a lockbox, locking server rack, or in a room that is
behind a lock and key.
15. Connect IP Cameras to the PoE Ports on the Back of an NVR:
Cameras connected to the PoE ports on the back of an NVR are isolated from the outside world
and cannot be accessed directly.
16. Isolate NVR and IP Camera Network
The network your NVR and IP camera resides on should not be the same network as your
public computer network. This will prevent any visitors or unwanted guests from getting access
to the same network the security system needs in order to function properly.

Foreword IV
Foreword
General
This Manual introduces the operation of the web interface.
Safety Instructions
The following categorized signal words with defined meaning might appear in the Manual.
Signal Words
Meaning
CAUTION
Indicates a potential risk which, if not avoided, could result in
property damage, data loss, lower performance, or unpredictable
result.
TIPS
Provides methods to help you solve a problem or save you time.
NOTE
Provides additional information as the emphasis and supplement
to the text.
Revision History
No.
Version
Revision Content
Release Date
1
V1.0.0
First release
September, 2018
Privacy Protection Notice
As the device user or data controller, you might collect personal data of others such as face,
fingerprints, car plate number, Email address, phone number, GPS and so on. You need to be
in compliance with the local privacy protection laws and regulations to protect the legitimate
rights and interests of other people by implementing measures include but not limited to:
providing clear and visible identification to inform data subject the existence of surveillance
area and providing related contact.
About the Manual
The Manual is for reference only. If there is inconsistency between the Manual and the
actual product, the actual product shall prevail.
We are not liable for any loss caused by the operations that do not comply with the Manual.
The Manual would be updated according to the latest laws and regulations of related
regions. For detailed information, see the paper manual, CD-ROM, QR code or our official
website. If there is inconsistency between paper manual and the electronic version, the
electronic version shall prevail.
All the designs and software are subject to change without prior written notice. The product

Foreword V
updates might cause some differences between the actual product and the Manual. Please
contact the customer service for the latest program and supplementary documentation.
There still might be deviation in technical data, functions and operations description, or
errors in print. If there is any doubt or dispute, please refer to our final explanation.
Upgrade the reader software or try other mainstream reader software if the Manual (in PDF
format) cannot be opened.
All trademarks, registered trademarks and the company names in the Manual are the
properties of their respective owners.
Please visit our website, contact the supplier or customer service if there is any problem
occurred when using the device.
If there is any uncertainty or controversy, please refer to our final explanation.

Important Safeguards and Warnings VI
Important Safeguards and Warnings
The following description is the correct application method of the device. Please read the
manual carefully before use, in order to prevent danger and property loss. Strictly conform to
the manual during application and keep it properly after reading.
Operating Requirement
Please don’t place and install the device in an area exposed to direct sunlight or near heat
generating device.
Please don’t install the device in a humid, dusty or fuliginous area.
Please keep its horizontal installation, or install it at stable places, and prevent it from
falling.
Please don’t drip or splash liquids onto the device; don’t put on the device anything filled
with liquids, in order to prevent liquids from flowing into the device.
Please install the device at well-ventilated places; don’t block its ventilation opening.
Use the device only within rated input and output range.
Please don’t dismantle the device arbitrarily.
Please transport, use and store the device within allowed humidity and temperature range.
Power Requirement
The product shall use electric wires (power wires) recommended by this area, which shall
be used within its rated specification!
Please use power supply that meets SELV (safety extra low voltage) requirements, and
supply power with rated voltage that conforms to Limited Power Source in IEC60950-1. For
specific power supply requirements, please refer to device labels.
Appliance coupler is a disconnecting device. During normal use, please keep an angle that
facilitates operation.

Table of Contents VII
Table of Contents
Cybersecurity Recommendations........................................................................................................... I
Foreword ..................................................................................................................................................IV
Important Safeguards and Warnings ....................................................................................................VI
1 Initialization............................................................................................................................................ 1
2 Login Interface....................................................................................................................................... 3
Logging In ..................................................................................................................................... 3
Resetting Password ...................................................................................................................... 3
3 Main Interface ........................................................................................................................................ 5
4 Local Setting.......................................................................................................................................... 6
Basic.............................................................................................................................................. 6
Video & Audio................................................................................................................................ 7
Access Control .............................................................................................................................. 9
System ........................................................................................................................................ 10
Security ........................................................................................................................................11
5 Household Setting............................................................................................................................... 12
VTO No. Management ................................................................................................................ 12
5.1.1 Adding VTO....................................................................................................................... 12
5.1.2 Modifying VTO Information............................................................................................... 14
5.1.3 Deleting VTO .................................................................................................................... 14
Room No. Management.............................................................................................................. 14
5.2.1 Adding Room Number ...................................................................................................... 14
5.2.2 Modifying Room Number.................................................................................................. 16
5.2.3 Issuing Access Card ......................................................................................................... 16
VTS Management ....................................................................................................................... 17
IPC Setting .................................................................................................................................. 18
Status .......................................................................................................................................... 20
Publish Information ..................................................................................................................... 20
5.6.1 Send Info........................................................................................................................... 20
5.6.2 History Info........................................................................................................................ 21
6 Network Setting ................................................................................................................................... 22
Basic............................................................................................................................................ 22
6.1.1 TCP/IP .............................................................................................................................. 22
6.1.2 HTTPS .............................................................................................................................. 22
FTP.............................................................................................................................................. 22
SIP Server................................................................................................................................... 23
IP Permissions ............................................................................................................................ 24
7 Log Management................................................................................................................................. 26
Call .............................................................................................................................................. 26
Unlock ......................................................................................................................................... 26

Initialization 1
1 Initialization
For first time login or after the VTO being reset, you need to initialize the web interface. The
default IP address of the VTO is 192.168.1.110, and make sure the PC is in the same network
segment as the VTO.
Connect the VTO to power source, and then boot it up.
Open the internet browser on the PC, then enter the default IP address of the VTO in
the address bar, and then press Enter.
The Device Init interface is displayed. See Figure 1-1.
Device initialization
Enter and confirm the password, and then click Next.
The Email setting interface is displayed.
Select the Email check box, and then enter your Email address. This Email address
can be used to reset the password, and it is recommended to finish this setting.
Click Next. The initialization succeeded.
Click OK.
The login interface is displayed. See Figure 1-2.

Initialization 2
Login interface

Login Interface 3
2 Login Interface
Logging In
Before logging in, make sure that the PC is in the same network segment as the VTO.
Open internet browser on the PC, then enter the VTO IP address in the address bar,
and then press Enter.
The login interface is displayed. See Figure 2-1.
Login interface
Enter "admin" as username, then the password you set during initialization, and then
click Login.
Resetting Password
On the login interface (Figure 2-1), click Forgot Password?.
The Reset the password (1/3) dialog box is displayed. See Figure 2-2.
Reset the password (1/3)
Click Next.
The Reset the password (2/3) dialog box is displayed. See Figure 2-3.

Login Interface 4
Reset the password (2/3)
Scan the QR code to obtain the security code in your mailbox, and then enter the
security code in the input box.
If you did not configure Email during initialization, contact the supplier or customer
service for help.
To obtain security code again, refresh QR code interface.
Use the security code within 24 hours after receiving it. Otherwise, it will become
invalid.
If wrong security code is entered for 5 times continuously, this account will be
locked for 5 min.
Click Next, and then the Reset the password (3/3) dialog box is displayed.
Set and confirm the new password as instructed, and then click OK.

Main Interface 5
3 Main Interface
Log in the web interface of the VTO, and then the main interface is displayed. See Figure 3-1.
Main interface
For the introduction of the main interface, see Table 3-1.
Table 3-1 Main interface introduction
No.
Function
Description
1
General
function
These buttons are displayed all the time
Click to change the password and your
Email address.
Click to go to the main interface.
Click to log out, reboot the VTO or restore
the VTO to factory settings.
2
VTO
information
You can view the general information of the VTO,
including building No., unit No., device type, and VTO
No..
3
System
information
You can view the software version, MCU version, and
security baseline version.
4
Config
manager
Select Device Info or User Info, and then you can
export the VTO configuration or user information to the
PC or import them from it.
5
Function area
Click the buttons to go to the corresponding menu.

Local Setting 6
4 Local Setting
This chapter introduces how to configure VTO type, VTO No., video and audio, access
password, system time, and security function.
General operations:
After every configuration, click Confirm to save, and click Refresh to view the latest
change.
If you click Default, all the configurations in the current page would be restored to the
default, and you need to click Confirm to save.
Basic
This section introduces the configuration of VTO device type, VTO number and auto storage.
On the main interface (Figure 3-1), select Local Setting > Basic.
The Basic interface is displayed. See Figure 4-1.
Basic
Configure parameters, and for the detailed description, see Table 4-1.
Table 4-1 Basic parameter description
Parameter
Description
Device Type
You can select Villa Station or Second Confirmation.
Villa Station:
Second Confirmation:
Building number and unit number are available only when
other servers work as SIP server. See "6.3 SIP Server."
Fence station is normally used when other servers work as
SIP server.
Centre Call
No.
Configure the number of the management centre, and you can call
the management centre on every VTO or VTH in the network. The
default number is 888888.

Local Setting 7
Parameter
Description
Call Centre
Time
Time period in which you are allowed to call the management
centre.
VTO No.
The VTO number can be used to differentiate each VTO, and it is
normally configured according to unit or building number. You can
add VTO devices to the SIP server with their numbers.
Storage Point
You can only select FTP, and all the snapshots would be saved to
the FTP server automatically.
Auto Snapshot (unlock)
Select ON to enable this function, and then the system takes
snapshot every time when the door is unlocked.
Auto Snapshot (talking)
Select ON to enable this function, and then the system takes
snapshot every time when VTH user answers a call from the VTO.
Leave Message Upload
Select ON to enable this function, and then the system uploads the
messages from visitors to the FTP server automatically.
You need to enable FTP function first. See "6.2 FTP."
If there is SD card in the main VTH, the left messages would
be saved to the SD card by default.
To receive message, the VTO Message Time must be
configured to be more than 0. See the VTH user's manual.
Click Confirm to save.
Video & Audio
This section introduces how to configure the format and quality of the video that the VTO
records, and the audio control settings.
On the main interface (Figure 3-1), select Local Setting > Video & Audio.
The Video & Audio interface is displayed. See Figure 4-2.

Local Setting 8
Video & Audio
Configure parameters, and these configurations take effect immediately. See Table 4-2.
Table 4-2 Video parameter description
Parameter
Description
Main
Stream
Video Format
Select the video resolution from 720P, WVGA, and D1.
Format Rate
Configure the number of frames in 1 second. You can select
from 1 to 25 under PAL, and 1 to 30 under NTSC video
standard. The larger the value is, the smoother the video will
be.
Bitrate Rate
Configure the data amount that transmitted in 1 second. You
can select as needed. The larger the value is, the better the
video quality will be.
Sub
Stream
Video Format
Select the video resolution from CIF, WVGA, QVGA, and D1.
Format Rate
Configure the number of frames in 1 second. You can select
from 1 to 25 under PAL, and 1 to 30 under NTSC video
standard. The larger the value is, the smoother the video will
be.
Bitrate Rate
Configure the data amount that transmitted in 1 second. You
can select as needed. The larger the value is, the better the
video quality will be.
Conditions
Scene Mode
Adjust the video to adapt to different scenarios. You can
select from Automatic, Sunny, Night and Disabled. It is
Automatic by default.
Day/Night
Mode
You can select from Automatic, Colorful or Black White
mode.
BackLight
You can select from the following modes:

Local Setting 9
Parameter
Description
Mode
Disabled: no back light.
Backlight: the camera gets clearer image of the dark
areas on the target when shooting against light.
Wide dynamic: the system dims bright areas and
compensates dark areas to ensure the clarity of all the
area.
Inhibition: the system constrains bright areas and
reduces halo size to dim the overall brightness.
Sensor
Sensitivity
Adjust the value, and the larger the value is, the easier the
sensor will be triggered.
Video Standard
Select from PAL or NTSC according to your display device.
Picture
Brightness
Changes the value to adjust the picture brightness. The
larger the value is, the brighter the picture will be, and the
smaller the darker. The picture might be hazy if the value is
configured too big.
Contrast
Changes the contrast of the picture. The larger the value is,
the more the contrast will be between bright and dark areas,
and the smaller the less. If the value is set too big, the dark
area would be too dark and bright area easier to get
overexposed. The picture might be hazy if the value is set too
small.
Hue
Makes the color deeper or lighter. The default value is made
by the light sensor, and it is recommended.
Saturation
Makes the color deeper or lighter. The larger the value is, the
deeper the color will be, and the lower the lighter. Saturation
value doesn’t change image brightness.
Gamma
Changes the picture brightness and improves the picture
dynamic range in a non-linear way. The larger the value is,
the brighter the picture will be, and the smaller the darker.
Video.GainAuto
Amplify the video signal to increase image brightness. If the
value is too large, there will be more noise in the image.
Mirror
Select On, and then the image is displayed with left and right
side reversed.
Flip
Select On, and then the image is displayed upside down.
Audio
Control
Select Enable or Disabled to turn on or off each sound.
Volume
Control
Mic Volume
Adjust the value, and the larger the value is, the louder the
microphone on the VTO will be.
Beep Volume
Adjust the value, and the larger the value is, the louder the
system sounds will be.
Access Control
This section introduces how to configure the lock, including unlock responding interval, open
door command, door sensor check time, first unlock command and door contact type.
On the main interface (Figure 3-1), select Local Setting > Access Control > Local.

Local Setting 10
The Local interface is displayed. See Figure 4-3.
Local
Configure parameters, and for the detailed description, see Table 4-3.
Table 4-3 Local access control parameter description
Parameter
Description
Unlock Responding
Interval
The time interval to unlock again after the previous unlock, and the
unit is second.
Unlock Period
The time amount for which the lock stays open after unlock, and
the unit is second.
Door Sensor Check
Time
If you have installed door sensor, then you can configure the time
period, and If the unlock time exceeds the Door Sensor Check
Time, the door sensor alarm is triggered, and the alarm will be sent
to the management center.
Select the Enable check box, and the door will not be locked
until the door sensor contacts each other.
If you do not select the Enable check box, the door will be
locked after the Unlock Period finishes.
First Unlock
Command
You can connect a third-party phone such as SIP phone to your
VTO, and use the command to open the door remotely.
Door Contact Type
Select NC or NO according to the lock you use.
Click Save.
System
This section introduces how to configure the date format, time format, and the NTP server.
On the main interface (Figure 3-1), select Local Setting > System.
The System interface is displayed. See Figure 4-4.

Local Setting 11
System
Configure parameters, and for the detailed description, see Table 4-4.
Table 4-4 System parameter description
Parameter
Description
Date format
You can select from Year-Month-Day, Month-Day-Year, and
Day-Month-Year.
Time format
Configure the time format, and you can select from 12-Hour or
24-Hour.
System Time
Configure the VTO system date, time and time zone.
Do not change the system time arbitrarily; it might cause problems
on video searching and publishing snapshot or notice. Before
changing the system time, turn off video recording or auto snapshot.
Sync PC
Click to sync the VTO system time and the PC system time.
DST
Select ON to enable DST.
DST Type
Select Date to define a specific date for DST or select Week for it.
Begin Time
Configure the begin time and end time for DST.
End Time
NTP Enable
Select the check box to enable NTP timing.
NTP Server
Enter the domain name of the NTP server.
Zone
The time zone of the current area.
Port
The port number of the NTP server.
Update Cycle
The time interval that the VTO syncs time with the NTP server, and it
is 30 min at most.
Auto
Maintenance
Select the day and time for the auto maintenance, and the VTO will
reboot then.
SSH
Select the Enable check box, and then you can connect debugging
devices to the VTO through SSH protocol.
Click Save.
Security
On the main interface (Figure 3-1), select Local Setting > Security.
The Security interface is displayed. See Figure 4-5.

Household Setting 12
Security
Configure parameters, and for the detailed description, see Table 4-5.
Table 4-5 Security parameter description
Parameter
Description
CGI Enable
Select the check box to enable, and then you can use CGI command.
Reset Password
Select the check box to enable, and then the password resetting is
available.
Click Save to save. 5 Household Setting
This chapter applies to the condition in which the VTO works as SIP server (see 6.3 SIP Server),
and it introduces how to add, modify, and delete VTO, VTH, VTS, and IPC devices, and how to
send messages from the SIP server to other VTO and VTH devices. If you are using other
servers as SIP server, see the corresponding manual for the detailed configuration.
VTO No. Management
5.1.1 Adding VTO
You can add VTO devices to the SIP server, and all the VTO devices connected to the same
SIP server can make video call between each other.
Log in the web interface of the SIP server, and then select Household Setting > VTO
No. Management.
The VTO No. Management interface is displayed. See Figure 5-1.